interview

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). SKILL.md defines a repo-grounded workflow that reads local repo context and “when needed, tracker or linked documentation,” but only optionally reads externally provided docs “when the user provides external docs or says ‘with docs’,” and it otherwise stops after repo scan and grilling without a guaranteed mechanism to ingest outsider-authored free text from arbitrary submissions.